Norton "flat" Microsoft: is anti-virus software not tested?

I am afraid no one dared to add Microsoft "Windows XP " Operating System Is regarded as a virus. This story sounds totally unreliable, but unfortunately it is staged.

 

November May 18 Anti-Virus Software suffered a "Black Friday" and mistakenly identified the two key files of "Windows XP" as viruses and "kill" relentlessly. Numerous Microsoft Simplified Chinese version operating systems crashed. This unusually serious incident has led American Symantec with the Norton brand to fall into a crisis of trust in China.

Comparable to pandatv "?

Norton's competitors in ChinaRisingThe company and Jiangmin company compared the loss caused by the Norton "accidental injury" with the "pandatv incense" and "gray pigeon" viruses.

Rising said in its first red-rated security alert released this year that Norton has a considerable share in the enterprise-level market, especially in the financial, telecom, and other industries, the overall economic losses caused by the "accidental injury" event may even exceed the "pandatv incense ".

He fair, an anti-virus expert of Jiang min, told reporters that anti-virus software is often automatically backed up when the infected files are cleared to prevent accidental removal. From a technical perspective, it is not difficult to restore two normal files accidentally killed by Norton. User data is generally not lost or damaged, however, the indirect destructive power of a large range of "accidental injury" incidents is even higher than that of "gray pigeon ".

According to the reporter's understanding, on the day of the incident, many companies, scientific research institutions and the media in Beijing were affected by the "accidental injury" incident to varying degrees. employees were asked not to restart their computers or suspend their work.

Not only are enterprise-level users, but the lives of many individual users of the Norton Anti-Virus Software have also been disrupted. Symantec did not release relevant announcements in a timely manner within a long period of time when the "accidental injury" incident occurred, and the information was once chaotic. As a result, many people notify friends and family using the Norton Anti-Virus Software by phone, text message, or other means to either stop or stop the operation.

Why should we treat "Youjun" as "enemy"

He believes that the mainstream anti-virus software uses the pattern technology to detect and kill viruses. For example, the Public Security Department uses fingerprints to capture the perpetrators. Theoretically or in practice, although the probability is very small, there is a possibility that the virus pattern Code overlaps with the normal file pattern code. A slight carelessness may lead to misjudgment, false positives, and false positives. Therefore, security software vendors must be cautious when updating the virus database.

Two key files of the "Windows XP" that was accidentally killed by Norton have common and similar characteristics with the backdoor virus "hasks. Apparently, Norton's technical staff confused the two, but this was not just caused by carelessness.

He said that it is extremely difficult for anti-virus software vendors to avoid false positives due to overlapping signatures. One R & D Director of rising company made a straightforward statement: some anti-virus manufacturers reduced the testing standards to pursue individual technical indicators such as the number of viruses, detection and removal rate, and response time of new viruses, this will eventually result in an increase in false positives and major vulnerabilities in products.

A member of the Beijing informatization Work Office Expert Group told reporters that for a long time, many netizens and large organizations have considered "foreign" antivirus software more reliable, which is actually a misunderstanding. According to reports on virus outbreaks in recent years, the virus localization trend is obvious. Domestic hackers and toxic web pages are increasing, and netusers are facing major security risks in China, viruses such as pandatv are the first anti-virus software in China to intercept them. (Text/Xinhua Daily Telecom)